CVE-2025-12597
critical
CVSS v3
9.8
CVSS v2
5.8
VIR risk
9.8
Description
A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability is the function save_category of the file /admin_class.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| mayurik | best_house_rental_management_system | 1.0 | |
References
CWEs
CWE-74 CWE-89
Verify integrity in audit chain (admin only). AS-IS.